On 11 aug 2014, at 18:45, David Conrad <d...@virtualized.org> wrote: > I’m trying to collect an exhaustive list of (production-quality) DNSSEC > validating resolvers. The ones I know of so far are: > > BIND > Unbound > Nominum Vantio > Google Public DNS > > Any others?
Microsoft Windows 2012 R2. They even fetch the root trust anchor as described in http://tools.ietf.org/html/draft-jabley-dnssec-trust-anchor-09 (co-author G Bailey works at MS). jakob